-
Notifications
You must be signed in to change notification settings - Fork 61
Getting error Failed to add firewall rule error during sql script execution using GitHub Hosted Runner #181
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
This issue is idle because it has been open for 14 days with no activity. |
Hi @fmouraine do you have the error text for the authentication error? |
This issue is idle because it has been open for 14 days with no activity. |
@fmouraine this sounds similar to the error that I've encountered while trying to deploy to a SQL Managed Instance. This is the error that I see in the GHA workflow:
|
This issue is idle because it has been open for 14 days with no activity. |
Here my github action I use:
name: Az CLI login
uses: azure/login@v1
with:
client-id: ${{ secrets. client-id }}
subscription-id: ${{ secrets.subscription-id }}
tenant-id: ${{ secrets.tenant-id }}
name: Init Mssql db-user
uses: azure/sql-action@v2.2
with:
connection-string: "Server=myserver.database.windows.net,1433;Database=mydb;Authentication=Active Directory Default"
path: './mssql/scripts/db-init-user.sql'
If I launch it on ubuntu-latest (public runner), it works fine
If I launch it on an private runner (located in the same vnet as the sql server and sql server has a private endpoint), I have an authentification error (the github action return a failed to add firewall rules but in debug mode I can see authentification error)
It seems that the Github action Azure/sql-action does not managed correctly the authentification with AAD federation (when not using a public github runner). This analysis has been confirmed by Azure support
The text was updated successfully, but these errors were encountered: